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Abstract 

In this paper, using properties of Ramanujan sums and of the discrete Fourier 
transform of arithmetic functions, we give an explicit formula for the number of so¬ 
lutions of the linear congruence a\X\ + • • • + akXk = b (mod n), with gcd (xi,n) = U 
(1 < i < k ), where a\, t\,... , a*,, tfc, b, n (n > 1) are arbitrary integers. As a conse¬ 
quence, we derive necessary and sufficient conditions under which the above restricted 
linear congruence has no solutions. The number of solutions of this kind of congruence 
was first considered by Rademacher in 1925 and Brauer in 1926, in the special case of 
= U = 1 (1 < i < k). Since then, this problem has been studied, in several other 
special cases, in many papers; in particular, Jacobson and Williams [Duke Math. J. 

39 (1972), 521-527] gave a nice explicit formula for the number of such solutions when 
(ai,..., Ofc) = U = 1 (1 < i < k). The problem is very well-motivated and has found 
intriguing applications in several areas of mathematics, computer science, and physics, 
and there is promise for more applications/implications in these or other directions. 
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1 Introduction 

Let ai,..., a*,, b, n G Z, n > 1. A linear congruence in k unknowns Xi,...,Xk is of the form 

a±x\ + ■ ■ ■ + afcXfc = b (mod n). (1.1) 

By a solution of (II. ip we mean an ordered fc-tuple of integers modulo n, denoted by (xi, ..., Xk), 
that satisfies (II. ip . Let (ui,, u m ) denote the greatest common divisor (gcd) of ui,..., u m G 
Z. The following result, proved by D. N. Lehmer [19], gives the number of solutions of the 
above linear congruence: 
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Proposition 1.1. Let cq, ... , a*,, b, n G Z, n > 1. The linear congruence a\Xi-\~- ■ -+akXk = b 
(mod n) has a solution {xi,... ,Xk) G Z* if and only if i \ b, where £ = (ai,..., a*,, n). 
Furthermore, if this condition is satisfied, then there are £n fe_1 solutions. 

Interestingly, this classical result of D. N. Lehmer has been recently used ([4]) in in¬ 
troducing GMMH* which is a generalization of the well-known A-universal hash function 
family, MMH*. 

The solutions of the above congruence may be subject to certain conditions, such as 
gcd(xj,n) = ti (1 < i < k), where t\,... ,4 are given positive divisors of n. The number of 
solutions of this kind of congruence, we call it restricted linear congruence, was investigated 
in special cases by several authors. It was shown by Rademacher [29j in 1925 and Brauer [7] 
in 1926 that the number N n (k, b) of solutions of the congruence X\ + • • • + Xk = b (mod n ) 
with the restrictions (xi,n) = 1 (1 < i < k) is 


N n (k,b) 


^n(i- 

p | n,p | b 


(p — i) fc_1 



(~i) fc \ 
(p-i)V’ 


( 1 . 2 ) 


where <p(ri) is Euler’s totient function and the products are taken over all prime divisors p of 
n. This result was rediscovered later by Dixon jhlj and Rearick [UTj . The equivalent formula 

N n (k,b ) = ^Cd{b)(c n > (!-3) 

d | n 

involving the Ramanujan sums c n {m) (see Section 12.11) was obtained by Nicol and Vandiver 
[281 Th. VII] and reproved by Cohen [SJ Th. 6]. 

The special case of k = 2 was treated, independently, by Alder [Tj, Deaconescu HU, and 
Sander [32]. For k = 2 the function N n (2,b) coincides with Nagell’s totient function ([27]) 
defined to be the number of integers x (mod n) such that (x, n) — (b — x, n) — 1. From (jl .2(1 
one easily gets 


N n (2, b ) = n n (l-i) n (l —£)• < L4 ) 

p | n,p | b p | n,p\b 

From (II.4j) it is clear that N n ( 2, 0) = <p(n) and 

Nn(2,l)=nY[(l-^y (1.5) 

p\n 

Interestingly, the function N n ( 2,1) was applied by D. N. Lehmer [2(I| in studying certain 
magic squares. It is also worth mentioning that the case of k = 2 is related to a long-standing 
conjecture due to D. H. Lehmer from 1932 (see HU HU), and also has interesting applications 
to Cayley graphs (see [32j 33j ). 

The problem in the case of k variables can be interpreted as a ‘restricted partition problem 
modulo rd ([2H]), or an equation in the ring 7L n , where the solutions are its units am em). 
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More generally, it has connections to studying rings generated by their units, in particular 
in finding the number of representations of an element of a finite commutative ring, say R , 
as the sum of k units in R ; see m and the references therein. The results of Ramanathan 
HH Th. 5 and 6] are similar to (11,2ft and (II.31) . but in another context. See also McCarthy 
1221 Ch. 3] and Spilker f35j for further results with these and different restrictions on linear 
congruences. 

The general case of the restricted linear congruence 

cpaq + • • • + afcXfc = b (mod n), (ap,n) = ti (1 < i < k ), (1.6) 

was considered by Sburlati [33]. A formula for the number of solutions of (1 1.6 [) was deduced 
in [33, Eq. (4), (5)] with some assumptions on the prime factors of n with respect to the 
values cii,ti (1 < i < k) and with an incomplete proof. The special cases of k = 2 with 
t\ = t 2 = 1, and di = 1 (1 < i < k) of (11.61) were considered, respectively, by Sander and 
Sander [33], and Sun and Yang [36]. Cohen [TOl Th. 4, 5] derived two explicit formulas for the 
number of solutions of (jl.6|) with ti = 1, a* | n, a, prime (1 < % < k ). Jacobson and Williams 
[ 16] gave a nice explicit formula for the number of such solutions when (ai,..., a*,) = t * = 1 
(1 < i < k ). Also, the special case of b = 0, a, = 1, ti = —, rrii \ n (1 < i < k) is 
related to the orbicyclic (multivariate arithmetic) function ([21]), which has very interesting 
combinatorial and topological applications, in particular in counting non-isomorphic maps 
on orientable surfaces (see [31 [2U [231 [2H EZl HQ]). The problem is also related to Harvey’s 
famous theorem on the cyclic groups of automorphisms of compact Riemann surfaces; see 
Remark 13.141 

The above general case of the restricted linear congruence (1 1.6 li can be considered as 
relevant to the generalized knapsack problem (see Remark 13.121) . The knapsack problem is 
of significant interest in cryptography, computational complexity, and several other areas. 
Micciancio [25] proposed a generalization of this problem to arbitrary rings, and studied its 
average-case complexity. This generalized knapsack problem, proposed by Micciancio [25], is 
described as follows: for any ring R and subset S C R, given elements ap,..., a*, G R and a 
target element b e R, find (op,..., Xk) G S k such that Y^li=i a i' x i = b, where all operations 
are performed in the ring. 

In the one variable case, Alomair et ah [2], motivated by applications in designing 
an authenticated encryption scheme, gave a necessary and sufficient condition (with a long 
proof) for the congruence ax = b (mod n), with the restriction ( x , n) — 1, to have a solution. 
Later, Grosek and Porubsky [T5] gave a short proof for this result, and also obtained a formula 
for the number of such solutions. In Theorem 13.11 (see Section [3]) we deal with this problem 
in a more general form as a building block for the case of k variables [k > 1). 

In Section [3] we obtain an explicit formula for the number of solutions of the restricted 
linear congruence (11.611 for arbitrary integers ap, ti ,..., a*,, tk, b, n (n > 1). Two major in¬ 
gredients in our proofs are Ramanujan sums and the discrete Fourier transform (DFT) of 
arithmetic functions, of which properties are reviewed in Section [2] Bibak et al. [6] applied 
this explicit formula in constructing an almost-universal hash function family and gave some 
applications to authentication and secrecy codes. 
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2 Preliminaries 


Throughout the paper we use (ai,..., a*,) to denote the greatest common divisor (gcd) of 
a±,... ,a,k G Z, and write (a±, ..., a*,) for an ordered fc-tuple of integers. Also, for a G Z\ {0} 
and a prime p we use the notation p r || a if p r \ a and p r+1 \ a. 


2.1 Ramanujan sums 


Let e(x) = exp(27r*x) be the complex exponential 
m,n6Z with n > 1, 


£< 

3 = 1 


jm 

n 


n, 

0, 


For integers m and n with n > 1 the quantity 


with period 1, which satisfies for any 


if n | m, 
if n \ m. 


( 2 . 1 ) 


n 

c n{m) = ^ e 

3 = 1 
(j»=l 



( 2 . 2 ) 


is called a Ramanujan sum. It is the sum of the m-th powers of the primitive n-th roots of 
unity, and is also denoted by c(m, n ) in the literature. 

Even though the Ramanujan sum c n (m) is defined as a sum of some complex numbers, 
it is integer-valued (see Theorem 12.11 below). From (12. 2 p it is clear that c n (— m) = c n {m). 
Clearly, c n (0) = p(n), where p(n) is Euler’s totient function. Also, by Theorem 12.11 or 
Theorem 12.31 (see below), c n (l) = p(n), where p{n) is the Mobius function defined by 

{ 1 , if n — 1 , 

0, if n is not square-free, (2.3) 

(—1) K , if n is the product of n distinct primes. 

The following theorem, attributed to Kluyver [18], gives an explicit formula for c n {m ): 
Theorem 2.1. For integers m and n, with n > 1, 

c n {m) = ^ p(^) d. (2.4) 

d | (m,n) 


Thus, c n (m) can be easily computed provided n can be factored efficiently. By applying 
the Mobius inversion formula, Theorem 12.11 yields the following property: For m,n> 1, 


ft. 1 °. 1 


n, if n | m, 
if n\m. 


(2.5) 


The case m — 1 of (12.51) gives the characteristic property of the Mobius function: 

1, if n — 1, 


y mo 

d | n 


0, if n > 1. 


( 2 . 6 ) 


Note that Theorem 12.11 has several other important consequences: 
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Corollary 2.2. Ramanujan sums enjoy the following properties: 

(i) For fixed m e Z the function n H>- c n (m) is multiplicative, that is, if [rii, n 2 ) = 1, f/ien 
Cnm 2 ( m ) = c ni (m)c n2 (m). (Note that the function m H>■ c n (m) is multiplicative for a fixed n 
if and only if p(n) — 1.) Furthermore, for every prime power p r (r > 1), 

{ p r —p r ~ 1 , ifp r \m , 

—p r ~ 1 , ifp r ~ 1 \\m , (2.7) 

0, ifp r ~ l \m. 

(ii) c n (m ) is integer-valued. 

(Hi) c n (m ) is an even function of m (mod n), that is, c n (m ) = c n ((m, n)) ; for every 
m , n. 

The von Sterneck number ([39]) is defined by 


d>(m, n) 



( 2 . 8 ) 


A crucial fact in studying Ramanujan sums and their applications is that they coincide 
with the von Sterneck number. This result is known as von Sterneck’s formula and is 
attributed to Kluyver [fBj: 

Theorem 2.3. For integers m and n, with n > 1, we have 


<f>(m, n ) = c n (m). 


(2.9) 


Ramanujan sums satisfy several important orthogonality properties. One of them is the 
following identity: 

Theorem 2.4. ([9]) If n > 1, d\ | n, and d 2 | n, then we have 



n, if d\ — d 2 , 
0, ifd 1 ^d 2 . 


( 2 . 10 ) 


We close this subsection by mentioning that, very recently, Fowler et al. [Hj showed that 
many properties of Ramanujan sums can be deduced (with very short proofs!) using the 
theory of supercharacters (from group theory), recently developed by Diaconis-Isaacs and 
Andre. 


2.2 The discrete Fourier transform 

A function / : Z —> C is called periodic with period n (also called n-periodic or periodic 
modulo n ) if f(m + n) — f(m ), for every m e Z. In this case / is determined by the finite 
vector (/(1),..., f(n)). From (12.21) it is clear that c n (m ) is a periodic function of m with 
period n. 
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We define the discrete Fourier transform (DFT) of an n-periodic function / as the func¬ 
tion f = J : (f), given by 

n 

j=i 

The standard representation of / is obtained from the Fourier representation / by 

n 

m = -Y,fU)e (-) (»6Z), (2.12) 

n ^— J \ n J 

3 = 1 

which is the inverse discrete Fourier transform (IDFT); see, e.g., [26, p. 109]. 

The Cauchy convolution of the n-periodic functions f\ and fi is the n-periodic function 
/i <E> fi defined by 

n 

(/i®/ 2 )M= X] fi(xi)f 2 (x 2 ) = ^2fi(x)f 2 {m -x) (me If). 

1<X\,X2 x=l 

xi-\-X2=m (mod n) 

ft is well known that 

fi <8> h = / 1 / 2 , 

with pointwise multiplication. More generally, if fi, ■ ■ ■, fk are n-periodic functions, then 


T(h®---®fk) = J r (fi)---J r (fk). 


(2.13) 


For t | n, let g nt t be the n-periodic function defined for every m e Z by 

Qn,t ( m ) 


1 . if (m, n ) = £, 
0 , if (m, n) 7 ^ t. 


We will need the next two results. The first one is a direct consequence of the definitions. 
Theorem 2.5. For every t \ n, 


Qn,t( m ) = c f( m ) (meZ), 

in particular, the Ramanujan sum m 1 —y c n (m ) is the DFT of the function m 1 —> Q n ,i(m). 

As already mentioned in Corollary 12 . 2f iii). a function / : Z — > C is called n-even, or even 
(mod n), if f(m) = f((m, n)), for every m G Z. Clearly, if a function / is n-even, then it is 
n-periodic. The Ramanujan sum m 1 —>■ c n (m) is an example of an n-even function. 

Theorem 2.6. ( [381 Prop. 2]) If f is an n-even function, then 

f(m) = f( d ) c ^( m ) ( m e z )- 

d | n 

Proof. Group the terms of (12.lip according to the values d = ( m,n ), taking into account 
the definition of the n-even functions. □ 
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3 Linear congruences with (xi,ri) = U (1 < i < k) 


In this section, using properties of Ramanujan sums and of the discrete Fourier transform 
of arithmetic functions, we derive an explicit formula for the number of solutions of the 
restricted linear congruence (11.61) for arbitrary integers ai, t\,... , a*, 4 , b, n (n > 1 ). 

Let us start with the case that we have only one variable; this is a building block for the 
case of k variables (k > 1). The following theorem generalizes the main result of [15], one of 
the main results of [2], and also a key lemma in [28] (Lemma 1). 

Theorem 3.1. Let a, b, n > 1 and t > 1 be given integers. The congruence ax = b (mod n ) 
has solution(s) x with (x,n) — t if and only if t | ( b,n ) and (a, = (|, j). Furthermore, if 

these conditions are satisfied, then there are exactly 



solutions, where p ranges over the primes and d = (a, j) = (|, j). 

Proof. Assume that there is a solution x satisfying ax = b (mod n ) and (x, n ) = t. Then 
(ax,n) = ( b,n ) = td, for some d. Thus, t | ( b,n ) and ipfij) = (f, f) = d. But since 
(f, f) = 1, we have (a, f) = (*, f) = d. 

Now, let t | (b,n) and (a, j) = (|, |) = d. Let us denote A = 2 , B = jf , N = Then 
(A, Af) = (R, Af) = 1. Since (A, Af) = 1, the congruence Ay = B (mod N) has a unique 
solution y 0 = A~ X B modulo N and (Ay 0 , N) = ( B,N ), that is (yo, N) = 1. It follows that 
a(tyo ) = b (mod n), which shows that Xq = ty 0 is a solution of ax = 6 (mod n). 

If x is such that ax = b (mod n ) and (x,n) = t, then x = ty and A?/ = B (mod N). 
Hence, all solutions of the congruence ax = b (mod n) with (x, n) = t have the form x = 
t(y 0 + kN), where 0 < k < d — 1 and (?/ 0 + kN, = 1. Since (yo, N ) = 1, the latter condition 
is equivalent to (y 0 + kN,d) = 1. The number S of such solutions, using the characteristic 
property ( 12 . 6 j) of the Mobius function, is 


0<fc<d—1 
(yo+kN,d)=l 


= ^ 
0<k<d—l S | (yo+kN,d) 


E i- 

()<k<d-l 

S | yo+kN kN=—yo (mod S) 

Here, if v — ( N,S ) > 1, then v \ yo since (yo,N) = 1. Thus, the congruence kN = —y 0 
(mod 6) has no solution in k and the inner sum is zero. If (N, 5) = 1, then the same 
congruence has one solution in k (mod 5) and it has | solutions (mod d). Therefore, 


^/i(<f) 1 = Y^ 


5 I d 


0<k<d—l 


5 I d 


s= e m- s 

S\d 

(5,N)=1 



pjN 


<e(m V (?) 

vW v(5Y 
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The proof is now complete. 


□ 


Remark 3.2. In JEj the authors only prove the first part of Theorem \S.l\ in the case oft = 1, 
and apply the result in checking the integrity of their authenticated encryption scheme (W- 
Their main result, 0 Th. 5.11], is obtained via a very long argument; however, formula 
(13. ip alone gives a one-line proof for JU Th. 5.11] that we omit here. 

Corollary 3.3. The congruence ax = b (mod n) has exactly one solution x with (x,n) = t 
if and only if one of the following two cases holds: 

(i) (a, f) = (£, f) = 1, where t | (, b,n); 

(ii) (a, j) = (|, j) = 2, where t\b, n — 2 r u, r > 1, u > 1 odd, t = 2 r ~ 1 v, v \ u. 

Proof. Let d = (a, j) — (|, y). If d — 1, then (13.ip shows that there is one solution. Now 
for d > 1 it is enough to consider the case when d — (j > 1) is a prime power. Let p r || n, 

p s || t with 0 < j + s < r. Then, by (13.ip . there is one solution if pf ^1 — I'J =1 provided 

that p j p r ~ s ~f This holds only in the case p = 2, j = 1, s + j = r. This gives d — 2 together 
with the conditions formulated in (ii). □ 

We remark that Corollary 13.31 in the case of t — 1, was obtained in [15) Cor. 4], 

Now we deal with the case of k variables (k > 1). Assume cq,..., a*,, 6 are fixed and let 
N n (t \,... ,tk) denote the number of incongruent solutions of (1 1.6 P . We note the following 
multiplicativity property: If n,m> 1, ( n,m ) = 1, then 

dlnmifli ■ ■ • i tfc) Unipii ■ ■ ■ i r ^Lk)El m {v\, . . . , V]fj, (3.2) 

with unique Ui,Vi such that L = UiVi , Ui | n, Vi \ m (1 < i < k). This can be easily shown 
by the Chinese remainder theorem. Therefore, it would be enough to obtain N n (t\, ...,£*) 
in the case n = p r , a prime power. However, we prefer to derive the next compact results, 
which are valid for an arbitrary positive integer n. 

In the case that a t — 1 (1 < i < k), we prove the following result: 

Theorem 3.4. Let b, n > 1, t, \ n (1 < i < k) be given integers. The number of solutions 
of the linear congruence x\ +-b Xk = b (mod n), with (x*, n) — U (1 < i < k), is 

k 

N n {b ; ti, ■ ■ ■, t k ) = -yy^c d (fe)]~[ciL Q) > 0. (3.3) 

d | n i=1 

Proof. Apply the properties of the DFT. Observe that 

( Qn,ti 0***0 Qn,tk)(p') ^ ^ 1 

l<xi ,...,Xk<n 
xi (mod n ) 

(xi,n)=ti, l<i<k 

is exactly the number N n (b ; ti,..., tk) of solutions of the given restricted congruence. 












Therefore, by (I2.13P and Theorem 12.51 

N n (b;ti, ...,t k ) = cjl(6) • • -C" (6), 

r l 

where the variable for the DFT is b (n,ti,, t k being parameters). Now the IDFT formula 
(j 2 . 12(1 gives 

n 

lv^ ... . (b.j' 


N r 


(Ml, ■■•,4) = ~y2 c ^ (j)-"Ci(j)e( —) . 

nZ—/ ‘i **: \ n / 


j=i 


By Corollary I2.2f iii) and the associativity of gcd one has for every i (1 < i < k), 


C£ ((j») = c» ( ( (j,n), H j = c» ( ( j, (ra, ~ 


= ClL 


n 


i, j, ) ) = c £ CO • ( 3 - 4 ) 


The properties (13.4p show that m y c» (m) • • is an n-even function. Now by 

applying Theorem 12.61 we obtain (13. 3 p . □ 

Remark 3.5. Note that a slight modification of the proof of 123 Prop. 21] furnishes an 
alternate proof for Theorem \3.f\ Sun and Yang fifty obtained a different formula (with a 


longer proof ) for the number of solutions of the linear congruence in Theorem 3.f. but we need 
the equivalent formula (13.3p for the purposes of this paper (see also fity for another equivalent 
formula ). We also remark that the special case of b — 0, = —, mi \ n (1 < i < k) gives 

the function 


n 


d 


which was shown in 
function defined in 


E(mi ,..., m k ) = ~y^p(dj]~[r 

d\n i=l 

Prop. 9] to be equivalent to the orbicyclic (multivariate arithmetic) 
by 

n k 

E(mi,.. .,m k ) \= 

q =1 i =1 


The orbicyclic function, E(nii,..., mk), has very interesting combinatorial and topological 
applications, in particular, in counting non-isomorphic maps on orientable surfaces, and was 
investigated in kmmw See also fifty fifty . 

Now, using Theorem 13.11 and Theorem 13.41 we obtain the following general formula for 
the number of solutions of the restricted linear congruence (11.61b 


Theorem 3.6. Let ai, fj , b, n G Z, n > 1, fj | n (1 < i < k). The number of solutions of the 
linear congruence a\X\ + • • • + a k x k = b (mod n), with (xi, n) = ti (1 < i < k), is 


N n (b , cti, ti,..., dfc, tfi) 


n 


i 

n 


V\u 

| n 

i=i T yudi 

k 

i=1 


J2 c d(b)Y[ 

d | n 


n 

C — [ -1 

i d i \ d 


U 


i= 1 
k 


5Z cd(&) IT 


h 1 l ( a,iti,d ) 


d | n 


—i ■ i i 


(3.5) 


(3.6) 
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where di = (a*, fi) (1 < i < k). 

Proof. Assume that the linear congruence a\X\ + • • • + a>kXk = b (mod n) has a solution 
(xi,... ,%k) £ Tfi with (xi,n) — P (1 < i < k). Let ajXj = y t (mod n) (1 < i < k). Then 
(aiXi,n) = ( yi,n ) = pdi, for some di (1 < i < k). Thus, (fi^, fi) = (f-, fi) = di. But since 
(fS f) = 1, we have d t = (a t , fi) = (f, ). 

By Theorem 13.41 the number of solutions of the linear congruence Vi + ■ ■ ■ + Vk = b 
(mod n), with ( y^n ) = tfi, (1 < % < k), is 


1 

n 


d | n 


i =1 


(3.7) 


Now, given the solutions (y±,, yk) of the latter congruence, we need to find the number 
of solutions of a^x* = y t (mod n), with (xj,n) = P (1 < i < k ). Since (a,, = (fi, fi) = di, 
by Theorem 13.11 the latter congruence has exactly 



(3.8) 


solutions. Combining (13.711 and (13.8|) we get the formula (13.51) . 
Furthermore, applying von Sterneck’s formula, (j2.9|) . we deduce 


C-!L- 



<p(wi) 


where, denoting by [a, b] the least common multiple ( 1 cm) of the integers a and b, 


= ik = TT = [tidj,d] = d 

[uZa ^idi ( Udi,d ) 

By inserting (13. 9 p into (|3.5[) we get (13.6p . 


d 

((aiti,n),d) 


d 

(clip, d') 


(3.9) 


□ 


Remark 3.7. For fixed ai,p (1 < i < k) and fixed n, the function 


b^r N n (b ; a x ,ti,... ,a k ,t k ) 

is an even function (mod n ). This follows from the formula (13.5ft . showing that 


N n ( b , ai, 1 1 ,..., a k , t fc) 


is a linear combination of the functions b i —y Cd(b) (d \ n), which are all even (mod n) by 
( 12 .4p . See also (13.41) . 


Remark 3.8. In the case of k = 1, by comparing Theorem ld.il with formula (13.5p and by 
denoting t\d\ = s, we obtain, as a byproduct, the following identity, which is similar to ( 12 . lOj) 
(and can also be proved directly ): If b,n E 7L, n > 1, and s \ n, then 


d | n 



n, if (b, n) = s , 
0 , if (b, n) -fi s. 


(3.10) 
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If in (jl. 6 j) one has a* = 0 for every 1 < i < k, then clearly there are solutions (xi,..., Xk) if 
and only if b = 0 (mod n) and tj | n (1 < i < k), and in this case there are ip(n/ti) ■ ■ ■ (p(n/tk) 
solutions. 

Consider the restricted linear congruence (ll.fijl and assume that there is an io such that 
a ; 0 ^ 0. For every prime divisor p of n let r p be the exponent of p in the prime factorization 
of n and let m p denote the smallest j > 1 such that there is some i with p 7 { a,t. % . There 
exists a finite m p for every p, since for a sufficiently large j one has p 7 { aj 0 t; 0 . Furthermore, 
let 


e p = #{i : 1 < i < k,p mp \ a^}. 


By definition, e p is at most the number of i such that a* 7 ^ 0. 


Theorem 3.9. Let ai,t i: b,n e Z, n > 1, ti \ n (1 < i < k) and assume that a, 7 ^ 0 for at 
least one i. Consider the linear congruence a±x 1 + • • • + = b (mod n ) , with (xi, n ) = t t 

(1 < i < k). If there is a prime p \ n such that m p < r p and \b or m p > r p + 1 and 

p rp j b, then the linear congruence has no solution. Otherwise, the number of solutions is 



1 ftp \ fp 

p m p | 6 



m p < r v 
p rn v~ 1 ||fe 



(-1)«- 

(p- 1 )”'/ ’ 


(3.11) 


where the last two products are over the prime factors p of n with the given additional 
properties. Note that the last product is empty and equal to 1 if b = 0. 


Proof. For a prime power n = p rp {r p > 1) the inner sum of (13.61) is 


W : = 


d\ P r p t=1 p 


( aiU,d ) 


d 


(a.iti,d) 


^C p:l (b)Y[- 

j =0 i =1 P 


P j \ 

(aiti,pJ) J 


P j A 
ifliti ,pi) J 


Assume that m p < r p . Then p m p -1 | a{ti for every i and p mp \ a{ti for at least one i. 
Therefore, (a^^p 7 ) = p j if 0 < j < m p — 1 . Also, ( aiti,p mp ) = p mp - 1 if p mp \ afa, and this 
holds for e p distinct values of i. We obtain 


W = y^c p j( 6 ) + c p m P (b) 


3 =0 


(_l) e P 

(p — l) ep ’ 


the other terms are zero. We deduce by using (I2.5[) and (j2.7[) that 


W = 


pTTlp 1 
rpTTlp 1 


1 - 


(p-i) ep_1 
(~i) ep 

(p-i) ep 


.0, 


if p mp | b, 
if p mp - L || b, 
if p m p -1 1 b. 


(3.12) 
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Now assume that m p > r p + 1. Then p Vp \ a t t, for every i and (a^p 7 ) = pi for every j 
with 0 < j < r p . Hence, by using (12.51) . 


r P 

W = (6) 

3 =1 


p rp , if p rp | b, 
0 , if p r p \ b. 


Inserting into (13. 6 p and by using the multiplicativity property (13. 2 p we deduce that there 
is no solution in the specified cases. Otherwise, the number of solutions is given by 


Eh Eh 

p | n i =1 


U " 

p\n 

i p > r p +1 
p r P \b 


n p m p~ i 11 

p\n 
m v < r p 
p m P\b 


( — I ) 6 -' 1 \ 

(p — l) e P~ l ) 


p\n 
m p < r p 
p^p - 1 || b 


where the multiplicativity property is also applied to the product of the p factors. This gives 

osmp. ' □ 


Corollary 3.10. The restricted congruence given in Theorem Id. .91 has no solutions if and 
only if one of the following cases holds: 

(i) there is a prime p | n with m p < r p and | b; 

(ii) there is a prime p \ n with m p > r p + 1 and p rp \ b; 

(in) there is a prime p | n with m p < r p , e p = 1 and p m p \ b; 

(iv) n is even, m 2 < r 2 , e 2 is odd and 2 m2 | b; 

(v) n is even, m 2 < r 2 , e 2 is even and 2 m2_1 || b. 


Proof. Use the first part of Theorem 13.91 and examine the conditions under which the factors 
of the products in (13.lip vanish. □ 


Example 3.11. 

1) Consider 2x\ + x 2 + 2x 3 = 12 (mod 24), with (xi, 24) = 3, (x 2 , 24) = 2, (x 3 , 24) = 4. 
Here 24 = 2 3 • 3, 

2 | apti = 6 , 2 | a 2 t 2 = 2 , 2 | a 3 t 3 = 8 , 

2 2 { api = 6, 2 2 { a 2 f 2 = 2 , 2 2 | a 3 t 3 = 8 , hence e 2 = 2 and m 2 = 2 , also 2 : | b = 12 , 

3 | apti — 6 , 3 { a 2 t 2 = 2, 3 \ a 3 t 3 = 8 , hence e 3 = 2, m 3 = 1, also 3 1 | b = 12. 

The number of solutions is 

N = y>(24/3M24/2M24/4)2 2 - 3 -‘ (l - 3 1 - 1 - 1 (1 - = 8 . 


2) Now let 2xi + x 2 + 2x 3 = 4 (mod 24), with (xi,24) = 3, (x 2 ,24) = 2, (x 3 ,24) = 4, 
where only b is changed. 
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Here 2 2 | b = 4, 3 1 " 1 || b = 4. 

The number of solutions is 

N = v >(24/3) V (24/2) V (24/4)2 2 - 3 - 1 (l - A _ _lzLl^ = 4. 

3) Let 2xi + x 2 + 2x 3 = 5 (mod 24), with (xi, 24) = 3, (x 2 , 24) = 2, (x 3 , 24) = 4, again 
only b is changed. 

Here 2 2 ^ 1 {6 = 5, hence, there are no solutions by Corollary 13.1014 ). (Well, this is 
obvious, since all terms have to be even, but 5 is odd.) 

4) Let 2xi + x 2 + 2x 3 = 10 (mod 24), with (xi, 24) = 3, (x 2 , 24) = 2, (x 3 , 24) = 4, again 
only b is changed. 

Here 2 2_1 || b = 10, hence, there is no solution by Corollary 13.lOlf v). 

We believe that Theorem 13.91 and Corollary 13.101 are strong tools and may lead to interest¬ 
ing applications/implications. For example, we can connect the restricted linear congruences 
to the generalized knapsack problem. In fact, Corollary 13.101 helps us to deal with this prob¬ 
lem in a quite natural case: 


Remark 3.12. The generalized knapsack problem with R = ’L n and S = Z* has no solutions 
if and only if one of the cases of Corollarv \3.1(A holds. 

Remark 3.13. In fUtf, we applied Theorem \3.I\ in constructing an almost-universal hash 
function family using which we gave a generalization of the authentication code with secrecy 
presented in |IJ/. 

Remark 3.14. Very recently, Bibak et al. m using Theorem \3.9\ as the main ingredient 
proved an explicit and practical formula for the number of surface-kernel epimorphisms from 
a co-compact Fuchsian group to a cyclic group (see also JMBf)- This problem has important 
applications in combinatorics, geometry, string theory, and quantum field theory (QFT). As 
a consequence, they obtained an ‘equivalent’ form of Harvey’s famous theorem on the cyclic 
groups of automorphisms of compact Riemann surfaces (see also 

Remark 3.15. If k = 1 then e p = 1 for every prime p | n, and it is easy to see that from 
Theorem \3.9\ and Corollarv \3. HA we reobtain Theorem \3.1\ 

The following formula is a special case of Theorem 13.91 and was obtained by Sburlati [34] 
with an incomplete proof. 


Corollary 3.16. Assume that for every prime p \ n one has m p = 1 , that is p { a{ti for at 


least one i 

([USD 


G Then the number of solutions of the restricted linear congruence 


n 


n 


2=1 


n 

V 1 7 - 


n 

p | 72, p | b 


(- 1 ) 


e D —l 


(P~ 1) 


€n 1 


n 

p\n,p\b 


(p-iy 


(3.13) 
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4 Concluding remarks 

As we already mentioned, the problem of counting the number of solutions of the linear 
congruence a\X\+- ■ ■ +CLkXk = b (mod n), with ( Xi,n ) = U (1 < i < k), is very well-motivated 
and has found intriguing applications in number theory, combinatorics, geometry, computer 
science, cryptography, string theory, and quantum field theory. In this paper, we obtained an 
explicit formula for the number of solutions of this linear congruence in its most general form, 
that is, for arbitrary integers ... ,ak,tk,b,n (n > 1 ). As a consequence, we derived 

necessary and sufficient conditions under which the above restricted linear congruence has no 
solutions. As this problem has appeared in several areas in mathematics, computer science 
and physics, we believe that our formulas might lead to more applications/implications in 
these or other directions. 
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